Privacy Policy

Effective November 1, 2026

WINDMILLS, LLC, a California limited liability company ("Windmills," "we," "us"), runs the website windmills.io and Windmills Training Log, a private fitness application. This policy explains what information we handle, why, and the choices you have.

In short

• The website has no accounts, cookies, analytics or advertising.
• Windmills Training Log reads Google Health data only for accounts we have authorized, and only after the account holder grants permission.
• We use that data only to show the account holder their own training history and analysis.
• We do not sell it, use it for advertising, or share it with data brokers.

1. This website

You can use windmills.io without giving us any personal information. The site does not set cookies or run analytics, advertising or tracking code.

Cloudflare, Inc. hosts the site. To deliver pages and protect the site from attacks, Cloudflare processes technical information such as your IP address, browser type and the pages you request.

If you email us, we receive your address and whatever you include in your message. MXroute delivers our email. We keep messages as long as we need them to respond and to keep normal business records.

2. Windmills Training Log

Windmills Training Log is private. It is not offered to the public, and only accounts we authorize can connect.

What we access

With your permission, given on Google's consent screen, the application has read-only access to the Google Health data below. It cannot add to, change or delete anything in your Google account.

How we use it

We use this data only to provide the features you see in the application: your workout history, totals, heart-rate and endurance trends, route comparisons, progress charts and written summaries of your training. Measurements we calculate from your data, such as efficiency and heart-rate drift, get the same protection as the data itself.

What we never do

• Sell or transfer the data to advertisers, data brokers or information resellers, even in aggregated or anonymized form.
• Use it for advertising of any kind.
• Use it to decide creditworthiness or for lending.
• Use it in a medical device, or to diagnose or treat any condition.
• Use it to train artificial intelligence or machine learning models.

People at Windmills do not read your data unless you ask us to, we need to for security, or the law requires it.

Who receives it

• Google LLC is the source of this data. Google's privacy policy covers how Google handles it.
• Anthropic, PBC. When you ask for AI analysis of your training, the data needed to answer is sent to Anthropic's Claude service. Nothing is sent unless you ask for or turn on that analysis.

We do not share this data with anyone else unless you consent, we must do so to comply with the law, or we need to investigate a security problem. If Windmills is ever part of a merger, acquisition or sale of assets, we will ask for your explicit consent before your data is transferred.

How we store and protect it

We store your data on private servers that we operate. Their disks and backups are encrypted, and the credentials that let the application read your data are kept on the same encrypted storage. Data travels over encrypted connections, and only Windmills administrators can access these systems.

3. Disconnecting and deleting your data

We keep your data while your account is connected, because long-term trends are the purpose of the application.

• To stop access: remove Windmills Training Log from your Google Account at myaccount.google.com/connections. We stop collecting new data as soon as you do. Data we already stored stays until you ask us to delete it.
• To delete your data: email support@windmills.io from the address on your account. We will delete your stored data within 30 days and confirm when it is done. Encrypted backups are removed as they age out on their normal schedule.
• If your account is deactivated or deleted: we stop collecting data and delete your stored data within 30 days in the same way.

Your original data stays in your Google account. You manage it there.

4. Children

Our website and application are not directed to children. Windmills Training Log is for adults, and we do not knowingly collect information from anyone under 18.

5. California privacy

You can ask us what personal information we hold about you, and ask us to correct or delete it, by emailing support@windmills.io. We do not sell personal information or share it for cross-context advertising. We do not track visitors across other websites, so browser "Do Not Track" signals do not change how this site behaves.

6. Google API disclosure

The use of information received from Google Health API and/or Developer Tools will adhere to the Google Health API Developer and User Data Policy, including the Limited Use requirements.

Windmills Training Log's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Windmills is not affiliated with or endorsed by Google. Google Health is a trademark of Google LLC.

7. Changes to this policy

If we change this policy, we will update the date at the top of this page. If a change affects how Google Health data is used, we will tell connected account holders before it takes effect.

8. Contact